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Method and device for monitoring a control unit of an internal 



combu stion engin e 

The invention relates to a method and a device for monitoring 
5 a control unit of an internal combustion engine. 

With modern internal combustion engines, instead of an 
accelerator pedal being directly coupled to a control element 
such as a throttle valve which adjusts the load, the load is 
- adjusted electronically by a control unit of the internal 
10 combustion engine. Errors in such a control unit can lead to 
an undesired and uncontrollable acceleration of the motor 
vehicle. For this reason, these control units must be 
monitored reliably. 

From EP 1 021 649 Bl, a method and a device for monitoring a 

15 control unit of an internal combustion engine is known in 

which an estimated value of the fuel mass is calculated which 
is actually metered per cycle in a cylinder of an internal 
combustion engine. The estimated value, of the fuel mass is 
calculated as a function of an air ratio which is determined 

20 by means of an oxygen probe arranged in the exhaust-gas tract 
of the internal combustion engine. An estimated value of the 
indicated torque at the internal combustion engine is 
calculated as a function of the estimated value of the fuel 
mass. An emergency run of the internal combustion engine is 

25 controlled if the estimated value and a desired value of the 
indicated torque conform to a predefined condition. Such a 
monitoring concept is particularly suitable for an internal 
combustion engine which is operated with a very lean mixture, 
i.e. with an air ratio which is considerably higher than one. 

30 In order to execute this method, a linear lambda probe is 
required, there being no question of using a cost-effective 
two-point lambda probe here. 
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As a result, particularly in the case of internal combustion 
engines which are operated with a stoichiometric air/ fuel 
ratio, this method leads to undesirably high costs. 

Therefore, the object of the invention is to create a simple 
and at the same time reliable method for monitoring a control 
unit for an internal combustion engine. 

The object of the invention is achieved by the features of the 
independent claims . 

The outstanding feature of the invention is the fact that 
sufficiently safe operation of the control unit is possible 
without having to monitor the control elements for the air 
path. Particularly for modern engine concepts this is a 
decisive advantage, because these concepts often have several 
control elements for adjusting the air mass such as, for 
example, throttle valves, the variable valve train and a 
turbocharger. It is therefore possible to dispense with 
redundant sensor arrangements for the individual element in 
the case of these control elements. 

in an advantageous embodiment of the invention, the variable, 
which characterizes the output parameter of a lambda 
regulation system, is the output parameter itself. As a 
result, monitoring is a particularly simple process and at the 
same time can also be carried out accurately. 

Further advantageous embodiments of the invention are defined 
in the subclaims. 

Embodiments of the invention are described in more detail with 
reference to the drawings. The figures show: 

Figure 1 a block diagram of a control unit for an internal 
combustion engine and a device for monitoring a 
control unit, 
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Figure 2 the first section of a flowchart of a first 

embodiment, a program for monitoring the control 
unit, 

Figure 3 a second section of a flowchart' of an embodiment of 
the' program for monitoring the control unit, 

Figure 4 the second section of a flowchart of an additional 

"embodiment of the program for monitoring the control 
unit, 

Figure 5 the first section of a flowchart of an additional 

embodiment of a program for controlling the internal 

combustion engine and 
Figure 6 a first section of a flowchart of an additional 

embodiment of a program for controlling the internal 

combustion engine. 

Elements with the same design and function are indicated in 
all the figures with the same reference symbols. 

Figure 1 shows a schematic diagram of an internal combustion 
engine 1 to which a control unit 2 and a monitoring unit 3 have 
been allocated. The internal combustion engine 1 has an intake 
tract with a manifold from where intake pipes are routed to 
the relevant cylinders. In the drawing, only one exemplary 
cylinder is shown. In addition, a piston is also provided 
which is connected to a crankshaft via a connecting rod. An 
exhaust-gas tract of the internal combustion engine preferably 
contains a catalytic converter. 

Sensors are allocated to control unit 2, said sensors ■ 
recording different variables and in each case determining the 
measured value of the variable. The control unit 2, determines 
as a function of the variables, the adjusting signals for the 
control elements of the internal combustion engine. 

The sensors are embodied as a crankshaft sensor which records 
a crankshaft angle of the crankshaft or derives the rotational 
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speed N from its timing, an air mass sensor which records an 
air mass flow, a throttle valve sensor which records a degree 
of opening of the throttle valve, a fuel pressure sensor which 
records a fuel pressure FUP, an exhaust-gas probe which 

5 records an exhaust gas/air ratio from which the. air ratio in 
the cylinders of the internal combustion engine is then 
derived and an intake pipe pressure sensor which records the 
pressure in the manifold and in the intake pipes of the intake 
tract. Depending on the embodiment of the invention, the 

10 above-mentioned sensors may be fewer by any number or there 
may also be additional sensors. 

As control elements, injection valves, spark plugs, the 
throttle valve and also additional control elements such as 
gas-changing valves and associated adjusting mechanisms, a 
15 turbo charger or an exhaust gas recirculation valve 

influencing the filling in the cylinders have been provided. 
In addition, there can also be additional control elements 
whose use in internal combustion engines is well-known. 

in a block Bl, an actual value MAF_AV of the air mass flow in 
20 the cylinders of the internal combustion engine 1 is 

determined. This either takes place directly from the measured 
value of the air mass flow sensor and the actual value MAF_AV 
' of the air mass flow is, however, preferably determined by 
means of a dynamic model of the intake tract as a function of 
25 different. operating variables of the internal combustion 
engine which on its side is again recorded directly or 
■ indirectly by the sensors allocated to the internal combustion 
engine. Determinative operating variables for such an intake 
pipe model are, for example, the degree of opening of the 
30 throttle valve and the rotational speed N. 

In a block B2, a lambda regulation system is provided which, 
as a function of an actual value L_AV of .the air ratio which 
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is derived from the measuring signal of the exhaust gas probe 
and a -desired value L_SP of the air ratio, determines an 
output parameter L_OUT. The lambda regulation system can then, 
for example, be embodied as a P, PI or PID regulation system, 
5 in which case the output parameter LOUT can also be 

influenced by additional correction variables. As a result, 
the desired value L_SP of the air ratio is then typically 
predefined for a stoichiometric mixture and, therefore, is 
approximately one. 

10 in a block B3, a desired value MFF_SP of the fuel flow is 

determined as a function of the actual value MAF.AV of the air 
mass flow and the output parameter L_OUT of the lambda 
regulation system. 

In a block B4, an injection point in time TI is then 
15 determined^ a function of the desired value MFF_SP. In a 
block B5, a start of injection signal SOI and an end of 
injection signal EOI are then determined as a function of the 
injection point in time and generated in the end stages of the 
control unit. The injection valves of the internal combustion 
20 engine are then activated with these start of injection and 
end of injection signals SOI, EOI. 

The control unit preferably has a torque-based control 
structure, i.e. the activation of the control elements of the 
internal combustion engine depends on the torque requested by 

25 the driver which is determined as a function of the position 
of an accelerator pedal. The torque is then adjusted, on the 
one hand, via the corresponding activation of the control 
elements which influence the air mass flow in the cylinders 
and, on the other hand, via the significantly more dynamic 

30 control elements such as the injection valves and the spark 
plugs . 

A monitoring unit 3 is provided which monitors the operation 
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of the control unit. To this end, the monitoring unit can 
access single or multiple measured variables which have been 
recorded by the sensors and said unit can also access 
operating variables and operands determined internally in the 
control unit 2 . The control unit 2 and the monitoring unit 3 
can both be arranged in a common housing. 

The actual value MAF_AV of the air mass flow determined by the 
control unit 2 is used, for example, to monitor the desired 
value TQI.SP of the torque to be adjusted on the internal 
combustion engine. For this purpose, an actual value of the 
torque which is generated by the internal combustion engine is 
- determined, for example, as a function of the actual value 
MAF_AV of the air mass flow. This actual value is then 
compared to the desired value TQI.SP and an error response 
takes place if the actual value exceeds the desired value 
TQI_SP by a predefined threshold value. 

in a first embodiment of the monitoring unit 3, a block B6 is 
provided to which the output parameter L_OUT of the lambda 
regulation system and a desired value L_OUT_SP of the output 
parameter of the lambda regulation system are fed. As a 
function of these two values, an error flag ERR then appears 
in block B6 if an error was detected in the control unit 2. 
The accurate procedure concerning this matter is explained in 
even greater detail on the basis of the following drawings. As 
a function of the error flag ERR, an emergency run of the 
internal combustion engine is then controlled in a block B7 
which can consist of the fact that the activation of the 
control elements is limited in such a way that no hazardous 
vehicle reactions can occur. 

3 in another embodiment of the monitoring unit 3, a block B8 is 
provided to which the actual value MAF_AV of the air mass flow 
and the start of injection signal SOI and the end of injection 
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signal EOI are fed. As a function of these variables, an error . 
flag ERR then appears in this block B8 if an error was 
detected in the control unit 2. The precise procedure involved 
is explained in greater detail on the basis of the following 
5 drawings . 

In a step SI (Figure 2), a program is started which is 
processed in the block B8 . 

In a step S2, a first threshold value THDl is determined from 
performance data as a function of the rotational speed N and 

10 from a desired value TQI.SP of the torque. The values of the 
performance data are then preferably determined by road tests 
or by means of tests on an engine test stand and are 
preferably applied in such a way that these values referred to 
the rotational speed decrease from the lower rotational speed 

15 limit, i.e. zero revolutions per minute up to a lower 

rotational speed threshold of, for example, 1500 revolutions 
and, for example, remain at a lower value linearly and then, 
in the range between the lower rotational speed threshold and 
an upper rotational speed threshold of, for example, 4000 

20 revolutions per minute, increase again up to very high 

rotational speeds. With regard to the desired value TQI_SP of 
the torque, information is preferably assigned to the 
performance data in such a way that the associated first 
threshold values THDl in the range of the low up to a higher 

25 torque which can, for example, reach 3/4 of the maximum 
achievable torque, have been selected very low and then 
increase strongly up to the maximum achievable torque. 
However, in a simpler embodiment, the first threshold value 
can also be predefined permanently. 

30 In a step S3, the deviation DELTA is determined from the 

difference, on the one hand, of the amount of the difference 
of the output parameter L_OUT and the desired value L_OUT_SP 
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of the output parameters of the lambda regulation system and, 
on the other hand, the first threshold value THDl . 

By determining the first threshold value THDl from the 
performance data as a function of the load variables, namely, 

5 the rotational speed N and the desired value TQI_SP of the 
torque, it can be guaranteed with the said assigning of 
information that in the operating ranges with high load 
dynamics, the deviations of the output parameter L_OUT and its 
allocated desired value L_OUT_SP will be less important than 

10 in ranges with lower load dynamics, in which case the first 
threshold value is selected to be correspondingly higher. The 
same advantage can also be obtained if the first threshold 
value is determined as a function of another load parameter 
such as, for example, the pressure of the intake pipe. 

15 Subsequently, together with step S3, processing is carried out 
in the step that follows on from connector A. 

In a step S4 (see Figure 3), a summed deviation -SUM_D is 
determined by adding the deviation DELTA. Subsequently, in a 
step S5 a test is performed to determine whether or not the 

20 summed deviation SUM_D exceeds a second predefined threshold 
value THD_2. If this is not the case, step S2 will again be 
used to continue with the processing after a predefined 
waiting period, if required. However, if the condition for 
step S5 has been met, the error flag ERR appears in a step S6. 

25 The program then ends in a step S7 . 

The procedure according to steps S4 and S5 has the advantage 
that in a very simple way, short-term failures in the range of 
the control unit do not lead to an error response, i.e. the 
appearing of an error flag ERR, but the greater the effect of 
30 the failure on a torque-critical variable, the quicker a 

response then also takes place. The procedure described on the 
basis of Figures 2 and 3 , in particular, distinguishes itself 
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by means of the fact that on the basis of the values of the 
output parameter L_OUT of a lambda regulation system, an error 
on a control element determining the air mass in the cylinders 
can be detected in a simple and reliable way. For this 
purpose, not all the control elements and therefore, in 
particular, the position sensors allocated to these have to be 
monitored and subjected to a plausibility check, because on 
the basis of the output parameter L_OUT, each random deviate 
between the actually intended quantity of air in the cylinders 
and the actually metered quantity of air can be detected 
safely. This procedure ensures that there is an error response 
before a further malfunction in the area of the control unit, 
causes the vehicle to accelerate greatly, rendering it 
uncontrollable. 

For example, such a malfunction can be that, on the one hand, 
the actual value MAF.AV of the air mass flow is lower than the 
air mass flow actually flowing into the cylinder which then on 
monitoring the desired value of the torque TQI_SP would not 
lead to an error response, and, on the other hand, in the case 
of a too high degree of opening of the throttle valve 
calculated incorrectly in the control unit would lead to an 
increase in the air mass actually flowing into the cylinders 
of the internal combustion engine. On the other hand, this 
would again lead. to the fact that the lambda regulation system 
in block B2 would make available a correspondingly high value 
of the output parameter L_OUT in the block B3 which, on the 
other hand, would lead to a strong increase in the desired 
value MFF.SP of the fuel flow into the cylinders. This would 
then lead to a suddenly very strong ' increase in the torque on 
3 the crankshaft of the internal combustion engine which would 
possibly not be detected by monitoring the desired value 
TQI_SP of the torque. 

in the embodiment of the program according to Figure 4, after 
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step S3 according to Figure 2, the method is continued in a 
step S8 where a test is carried out in order to determine 
whether or not the deviation DELTA exceeds a predefined third 
threshold value THD_3 . If this is the case, the summed 
deviation SUM.D is increased by a predefined increment value 
INC in a step 89. However, if the condition for step S8 has 
not been met, then the summed. deviation will be reduced by a 
decrement value DEC in a step S10. The steps S5. S6 and S7 
correspond to those according to Figure 3. When the first 
threshold value THD_1 has been selected in a suitable manner, 
the third threshold value can, for example, simply have the 
value zero . 

in a further embodiment, the program is started in a step Sll 
(see Figure 5) . In a step S12, a calculated injection point in 
time TI_CLC is determined as a function of the start of 
injection signal SOI or the end of injection signal EOI . 

in a step S13, a fuel flow correction value FAC_MFF is then 
determined as a function of a measured value MAP_MES of the 
pressure of an intake pipe and a fuel pressure FUP. In a step 
, S14, a monitoring value MAF_SUB_MON of the air mass flow is 
determined as a function of the calculated injection point m 
time TI_TLC, the fuel flow correction value FAC_MFF, the 
stoichiometric air ratio LST (14, 7), a cylinder cut-out 
degree of effectiveness EFF_SCC and a tank vent correction 
5 value MFF_ADD__CP and additional variables, if required. 

in a step S15, a fourth threshold value THD4 is then 
determined. from performance data as a function of the 
rotational speed N and the desired value TQI.SP of the torque. 
The assigning of information to the performance data accordxng 
l0 to step S15 is then determined in step S2 according to the 
performance data. 

Subsequently, in a step S16 the deviation DELTA is determined 
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from the difference, on the one hand, of the amount of the 
difference of the monitoring value MAF_SUB_MON of the air mass 
flow and the actual value MAF.AV of the air mass flow and, on 
the other hand, of the fourth threshold value THD4 . Processing 
is then continued in the step allocated to the connect point 
A On the one hand, the procedure according to Figure 5 is 
characterized in that the monitoring value MAF_SUB_MON can be 
calculated simply and with a value nevertheless calculated by 
the control unit and, in addition, even calculation errors of 
the control unit 2 can be detected in good time and simply in 
the blocks B3 , B4, B5 . 

A further embodiment of the program distinguishes itself from 
that of Figure 5 by the fact that in a step Sl6a (see Figure 
6), the deviation DELTA is determined, instead of with the 
monitoring value MAF_SUB_MON of the air mass flow with its 
derivation in time MAF_SUB_MON_DT and, instead of with the 
actual value MAF_AV of the air mass flow with the derivation 
in time of the actual value MAF_AV_DT . This procedure is 
characterized by means of its small requirement for static 
accuracy which guarantees a simplified conversion in the 
monitoring unit 3 and a high degree of robustness. 

According to step S16a in Figure 6, it is also possible in a 
step S3 in Figure 2 that the derivations in time of the output 
parameter L_OUT and the desired value L_OUT_SP of the output 
parameter for determining the deviation DELTA are used in 
which case the above -described advantages are likewise 
obtained. 

As an alternative to the described embodiments, in order to 
determine the deviation DELTA, it is also possible to use 
) another variable which characterizes the output parameter 
L_OUT of the lambda regulation system. To this end, the 
desired value MFF_SP and the injection point in time TI are 
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accordingly taken into consideration if in this case the 
influence of the output parameter L_OUT was considered each 
time . 

A reference value can, for example, be the predefined desired 
value (L_OUT_SP) of the output parameter of the lambda 
regulation system or the actual value (MAF_AV) of the air mass 
flow. 



